   ;; HMMM, same body as endpoint above in this case.  how can we unify the impl of 2 endpoints?
   (let-404 [org (sel :one Org :id id)]
     (let-404 [user (sel :one User :id user-id)]
-      (grant-org-perm user-id id (or (:admin body) false))
+      (grant-org-perm id user-id (or (:admin body) false))
       {:success true})))
 
 

                            :is_staff true
                            :is_active true
                            :is_superuser false)]
          (grant-org-perm (:id new-user-id) (:id org) (:admin body))
          ;; TODO - send signup email
          (-> (sel :one OrgPerm :user_id (:id new-user-id) :organization_id (:id org))
            (hydrate :user :organization)))
        (do
          (grant-org-perm (:id user) (:id org) (:admin body))
          (-> (sel :one OrgPerm :user_id (:id user) :organization_id (:id org))
              (hydrate :user :organization)))))))


  ;; TODO - permissions check
  (let-404 [org (sel :one Org :id id)]
    (let-404 [user (sel :one User :id user-id)]
      (grant-org-perm id user-id (or (:admin body) false))
      {:success true})))


